Under Document Properties -> Security:
Is it possible to set the security level such that 'Document Assembly' is permitted but other changes are not -one cannot delete or move comments but still assemble several documents?

I am afraid that this is not possible, as in many cases document assembly operations will require that the existing comment be moved, copied, recreated, etc, and we are unable to make an exception to the rules only in cases like this.